Beverly Hills Oncology Medical Group reports data breach exposing patient information

Beverly Hills Oncology Medical Group, a cancer treatment provider based in California, has disclosed a cybersecurity incident that may have compromised sensitive personal and medical information belonging to patients.

The medical group identified and blocked unauthorized access to its computer network on February 11, 2025. A forensic investigation, assisted by third-party cybersecurity specialists, later confirmed that cybercriminals had gained access to the network between February 7 and February 11, 2025.

Following a detailed review of the affected files, completed on October 13, 2025, Beverly Hills Oncology Medical Group determined that the compromised data included patients’ names, Social Security numbers, driver’s license or other government identification numbers, financial account information, credit or debit card details, health insurance policy numbers, and medical information such as diagnoses, treatments, and prescriptions.

Notification letters were mailed to potentially affected individuals in October. While there has been no evidence to suggest misuse of the exposed data, the medical group is offering 12 months of complimentary credit monitoring services to those impacted as a precautionary measure.

Beverly Hills Oncology Medical Group has stated that steps have been taken to secure its systems and enhance protections against future threats. The breach has not yet been listed on the U.S. Department of Health and Human Services Office for Civil Rights data breach portal, leaving the total number of affected individuals undetermined.

Murphy Law Firm has announced an investigation into the incident to determine whether affected patients may have legal claims arising from the exposure of their information. The firm is evaluating potential class action litigation on behalf of individuals whose data was involved in the breach.